[Buildbot] #3661: lock upstream dependencies and use service like pyup.io to update them

[Buildbot trac]

#3661: lock upstream dependencies and use service like pyup.io to update them
------------------------+------------------------
Reporter:  rutsky       |       Owner:
    Type:  enhancement  |      Status:  new
Priority:  major        |   Milestone:  undecided
 Version:               |  Resolution:
Keywords:               |
------------------------+------------------------

Comment (by rutsky):

 > last time we looked, the dependency managment service was not supporting
 several package per git tree.

 From [https://pyup.io/docs/configuration/#adding-requirement-files-
 manually pyup docs] it looks like they should support multiple
 specification of multiple requirements.txt from arbitrary path in git
 tree.

 Using separate requirements.txt file will also duplicate dependencies
 listing (one in setup.py, one in requirements.txt)

 Also I don't see easy way of adopting use of requirements.txt with current
 Travis/BuildbotTravis pipeline without significant refactoring.

--
Ticket URL: <http://trac.buildbot.net/ticket/3661#comment:2>
Buildbot <http://buildbot.net/>
Buildbot: build/test automation